Re: [TLS] Add max_early_data_size to TicketEarlyDataInfo

Filippo Valsorda <> Mon, 10 October 2016 19:22 UTC

Return-Path: <>
Received: from localhost (localhost []) by (Postfix) with ESMTP id 7A29B129471 for <>; Mon, 10 Oct 2016 12:22:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -2.701
X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: (amavisd-new); dkim=pass (1024-bit key) header.b=eDv87F5Z; dkim=pass (1024-bit key) header.b=dH7pshKn
Received: from ([]) by localhost ( []) (amavisd-new, port 10024) with ESMTP id 1AfuYLl7VWxF for <>; Mon, 10 Oct 2016 12:22:32 -0700 (PDT)
Received: from ( []) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by (Postfix) with ESMTPS id 16918129451 for <>; Mon, 10 Oct 2016 12:22:32 -0700 (PDT)
Received: from compute3.internal (compute3.nyi.internal []) by mailout.nyi.internal (Postfix) with ESMTP id 7BA6520817; Mon, 10 Oct 2016 15:22:31 -0400 (EDT)
Received: from web5 ([]) by compute3.internal (MEProxy); Mon, 10 Oct 2016 15:22:31 -0400
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed;; h=cc :content-transfer-encoding:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-sasl-enc :x-sasl-enc; s=mesmtp; bh=ZuIrQUSeT36J+Dp+7maWZsU8UZg=; b=eDv87F 5ZUaC08ppr0dHxv5r0pKvq14gY7MvblfBvo3p745SDRWzaaNtyL7Pe+fewl01i6t IDfIr87ONcTxCWqaLoWxuvYKbwcUdZzwDfM7sWX/8EGxyaQ4lER3Db9BbJUa5l1+ OfRTMB2LifjoMCGhgB6AKig1M60GJ71LgSpJI=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-sasl-enc:x-sasl-enc; s=smtpout; bh=ZuIrQUSeT36J+Dp +7maWZsU8UZg=; b=dH7pshKnoBwu3GSRhcFcVw0maZWpdHCV4pq4k1CI9dIxtRk xRSJQEyXuCHjtyWyhWbYBGFTx+q70UYTtSqSmjcdT4NURAN4OitHCFNsJCN1OfBI EjowmGX5OhU5xTEXH0PBsj7pF7PKX2k66AtJMecBupfVkPmaNRoPUSbm4jcw=
Received: by mailuser.nyi.internal (Postfix, from userid 99) id 5673296EA2; Mon, 10 Oct 2016 15:22:31 -0400 (EDT)
Message-Id: <>
X-Sasl-Enc: nroqix70MdJU+4IN1TRRXOGRkQte22G6P8fQLqeeIluN 1476127351
From: Filippo Valsorda <>
To: David Benjamin <>, Benjamin Kaduk <>,
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: multipart/alternative; boundary="_----------=_147612735139372480"; charset="utf-8"
X-Mailer: Webmail Interface - ajax-cdbff290
Date: Mon, 10 Oct 2016 20:22:31 +0100
In-Reply-To: <>
References: <> <> <>
Archived-At: <>
Subject: Re: [TLS] Add max_early_data_size to TicketEarlyDataInfo
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <>
List-Unsubscribe: <>, <>
List-Archive: <>
List-Post: <>
List-Help: <>
List-Subscribe: <>, <>
X-List-Received-Date: Mon, 10 Oct 2016 19:22:33 -0000

2016-10-07 22:06 GMT+0000 David Benjamin <>rg>:
> Units is a little interesting. For those purposes, this limit would
> kick in whether or not the early data could be decrypted, so the server-
> side limit would be measured in ciphertext, possibly even including
> record headers. (Although any inaccuracies in converting could be done
> by just advertising an underestimate and breaking peers that send
> pathologically silly things like all one-byte records. So it doesn't
> matter much.)

Yeah, I've been thinking about that. I went for plaintext because it
seemed to simplify the API on the client side, but maybe it's best to
count  the whole record size, and let the client worry about not doing
some silly splitting or padding.

I'll update the PR.